ViewVC Help

View File | Revision Log | Show Annotations | View Changeset | Root Listing

root/svn/ircd-hybrid/trunk/doc/reference.conf

Comparing ircd-hybrid/trunk/doc/reference.conf (file contents):
Revision 5007 by michael, Tue Dec 9 14:21:52 2014 UTC vs.
Revision 6609 by michael, Thu Oct 22 18:44:58 2015 UTC

#	Line 1 | Line 1
1		/*
2		* This is an example configuration file for ircd-hybrid
3		*
4	<	* Copyright (c) 2000-2014 ircd-hybrid development team
4	>	* Copyright (c) 2000-2015 ircd-hybrid development team
5		*
6		* $Id$
7		*/
#	Line 41 | Line 41 | serverinfo {
41		/*
42		* name: the name of this server. This cannot be changed at runtime.
43		*/
44	<	name = "hades.arpa";
44	>	name = "server.example.net";
45
46		/*
47		* sid: a server's unique ID. This is three characters long and must
#	Line 49 | Line 49 | serverinfo {
49		* a digit, followed by 2 alpha-numerical letters.
50		*
51		* NOTE: The letters must be capitalized. This cannot be changed at runtime.
52	+	*
53	+	* A sid is automatically generated at runtime, if you want to configure
54	+	* a specific sid, uncomment the following line.
55		*/
56	<	sid = "0HY";
56	>	#       sid = "0HY";
57
58		/*
59		* description: the description of the server.
#	Line 58 | Line 61 | serverinfo {
61		description = "ircd-hybrid test server";
62
63		/*
64	<	* network info: the name and description of the network this server
65	<	* is on. Shown in the 005 reply and used with serverhiding.
64	>	* network_name, network_desc: the name and description of the network this
65	>	* server is on. Shown in the 005 reply and used with serverhiding.
66		*/
67		network_name = "MyNet";
68		network_desc = "This is My Network";
#	Line 71 | Line 74 | serverinfo {
74		hub = no;
75
76		/*
77	<	* vhost: the IP to bind to when we connect outward to ipv4 servers.
78	<	* This should be an ipv4 IP only, or "*" for INADDR_ANY.
77	>	* vhost: the IP address to bind to when we connect outward to IPv4 servers.
78	>	* This should be an IPv4 address, or "*" for INADDR_ANY.
79		*/
80	<	#       vhost = "192.169.0.1";
80	>	#       vhost = "192.0.2.1";
81
82		/*
83	<	* vhost6: the address to bind to when we make outgoing connections
84	<	* to IPv6 servers. This should be an IPv6 address, or "*" for INADDR_ANY.
83	>	* vhost6: the IP address to bind to when we connect outward to IPv6 servers.
84	>	* This should be an IPv6 address, or "*" for in6addr_any.
85		*/
86	<	#       vhost6 = "3ffe:80e8:546::2";
86	>	#       vhost6 = "2001:DB8::1";
87
88	<	/* max_clients: the maximum number of clients allowed to connect. */
89	<	max_clients = 512;
88	>	/*
89	>	* default_max_clients: the default maximum number of clients allowed
90	>	* to connect. This can be changed from within IRC via /QUOTE SET MAX.
91	>	*/
92	>	default_max_clients = 512;
93
94		/*
95		* max_nick_length: only applies to local clients. Must be in the
#	Line 121 | Line 127 | serverinfo {
127		*
128		*      openssl req -new -days 365 -x509 -key rsa.key -out cert.pem
129		*
124	–	* See http://www.openssl.org/docs/HOWTO/certificates.txt
125	–	*
130		* Please use the following values when generating the cert
131		*
132		*      Organization Name: Network Name
133	<	*      Organization Unit Name: changme.someirc.net
134	<	*      Common Name: irc.someirc.net
135	<	*      E-mail: you@domain.com
133	>	*      Organization Unit Name: unit.example.net
134	>	*      Common Name: irc.example.net
135	>	*      E-mail: email@example.net
136		*/
137		#       ssl_certificate_file = "etc/cert.pem";
138
#	Line 167 | Line 171 | serverinfo {
171		*
172		* A list of supported ciphers by OpenSSL can be obtained by running:
173		*
174	<	*      openssl ciphers -ssl3 -tls1 -v
174	>	*      openssl ciphers -tls1 -v
175		*
176		* Multiple ciphers are separated by colons. The order of preference is
177		* from left to right.
#	Line 192 | Line 196 | serverinfo {
196		admin {
197		name = "Smurf target";
198		description = "Main Server Administrator";
199	<	email = "<syn@packets.r.us>";
199	>	email = "<admin@server.example.net>";
200		};
201
202		/*
#	Line 325 | Line 329 | motd {
329		*/
330		listen {
331		/*
332	<	* port: the port to listen on. If no host is specified earlier
333	<	* in the listen {} block, it will listen on all available IPs.
332	>	* port: the port to listen on. If no host is specified earlier in the
333	>	* listen {} block, it will listen on all available IP addresses.
334		*
335		* Ports are separated by commas; a range may be specified using ".."
336		*/
#	Line 335 | Line 339 | listen {
339		port = 6665 .. 6669;
340
341		/*
342	<	* Listen on 192.168.0.1/6697 with SSL enabled and hidden from STATS P
342	>	* Listen on 192.0.2.1/6697 with SSL enabled and hidden from STATS P
343		* unless you are an administrator.
344		*
345		* NOTE: The "flags" directive always has to come before "port".
#	Line 347 | Line 351 | listen {
351		*  hidden - Port is hidden from /stats P, unless you're an admin
352		*/
353		flags = hidden, ssl;
354	<	host = "192.168.0.1";
354	>	host = "192.0.2.2";
355		port = 6697;
356
357		/*
358	<	* host: set a specific IP address/host to listen on using the
358	>	* host: set a specific IP address to listen on using the
359		* subsequent port definitions. This may be IPv4 or IPv6.
360		*/
361	<	host = "1.2.3.4";
361	>	host = "192.0.2.3";
362		port = 7000, 7001;
363
364	<	host = "3ffe:1234:a:b:c::d";
364	>	host = "2001:DB8::2";
365		port = 7002;
366		};
367
#	Line 369 | Line 373 | auth {
373		* user: the user@host allowed to connect. Multiple user
374		* lines are permitted within each auth {} block.
375		*/
376	<	user = "*@172.16.0.0/12";
377	<	user = "*test@123D:B567:*";
376	>	user = "*@192.0.2.0/24";
377	>	user = "*test@2001:DB8:*";
378
379		/* password: an optional password that is required to use this block. */
380		password = "letmein";
381
382		/*
383		* encrypted: controls whether the auth password above has been
384	<	* encrypted.
384	>	* encrypted. Default is 'no' if nothing else is specified.
385		*/
386		encrypted = yes;
387
#	Line 396 | Line 400 | auth {
400		* need_ident    - require the user to have identd to connect          | ('+' prefix on /stats I)
401		* spoof_notice  - enable spoofing notification to admins
402		* exceed_limit  - allow a user to exceed class limits                 | ('>' prefix on /stats I)
403	<	* kline_exempt  - exempt this user from k/glines                      | ('^' prefix on /stats I)
404	<	* gline_exempt  - exempt this user from glines                        | ('_' prefix on /stats I)
403	>	* kline_exempt  - exempt this user from k-lines                       | ('^' prefix on /stats I)
404	>	* xline_exempt  - exempt this user from x-lines                       | ('!' prefix on /stats I)
405		* resv_exempt   - exempt this user from resvs                         | ('$' prefix on /stats I)
406		* no_tilde      - remove ~ from a user with no ident                  | ('-' prefix on /stats I)
407		* can_flood     - allow this user to exceed flood limits              | ('|' prefix on /stats I)
#	Line 405 | Line 409 | auth {
409		*                 clients such as Mibbit
410		*/
411		flags = need_password, spoof_notice, exceed_limit, kline_exempt,
412	<	gline_exempt, resv_exempt, no_tilde, can_flood;
412	>	xline_exempt, resv_exempt, no_tilde, can_flood;
413		};
414
415		auth {
#	Line 414 | Line 418 | auth {
418		* A user does not have to obey the redirection; the ircd just
419		* suggests an alternative server for them.
420		*/
421	<	redirserv = "server.tld";
421	>	redirserv = "server2.example.net";
422		redirport = 6667;
423
424	<	user = "*@*.tld";
424	>	user = "*@*.ch";
425
426		/* class: a class is required even though it is not used. */
427		class = "users";
#	Line 440 | Line 444 | operator {
444		* user: the user@host required for this operator. Multiple user
445		* lines are permitted within each operator {} block.
446		*/
447	<	user = "*sheep@192.168.0.0/16";
448	<	user = "*@127.0.0.0/8";
447	>	user = "*sheep@192.0.2.0/26";
448	>	user = "*@192.0.2.240/28";
449
450		/*
451		* password: the password required to oper. By default this will
#	Line 460 | Line 464 | operator {
464		encrypted = yes;
465
466		/*
467	<	* rsa_public_key_file: the public key for this oper when using /challenge.
468	<	* A password should not be defined when this is used; see
469	<	* doc/challenge.txt for more information.
467	>	* whois: allows to override the default RPL_WHOISOPERATOR numeric
468	>	* string shown in /whois.
469	>	* This string is propagated to all servers on the network.
470		*/
471	<	#       rsa_public_key_file = "etc/oper.pub";
471	>	#       whois = "is a Smurf Target (IRC Operator)";
472
473		/*
474		* ssl_certificate_fingerprint: enhances security by additionally checking
#	Line 485 | Line 489 | operator {
489		*/
490		ssl_connection_required = no;
491
492	<	/* class: the class the oper joins when they successfully /oper or /challenge. */
492	>	/* class: the class the oper joins when they successfully /oper. */
493		class = "opers";
494
495		/*
496	<	* umodes: the default usermodes opers get when they /oper or /challenge.
496	>	* umodes: the default user modes opers get when they /oper.
497		* If defined, it will override oper_umodes settings in general {}.
498	<	* Available usermodes:
498	>	* Available user modes:
499		*
500		* +b - bots         - See bot and drone flooding notices
501		* +c - cconn        - Client connection/quit notices
#	Line 519 | Line 523 | operator {
523		umodes = locops, servnotice, wallop;
524
525		/*
526	<	* privileges: controls the activities and commands an oper is
526	>	* flags: controls the activities and commands an oper is
527		* allowed to do on the server. All flags default to 'no'.
528		* Available flags:
529		*
530		* admin          - gives administrator privileges    | ('A' flag)
531	+	* close          - allows CLOSE
532		* connect        - allows local CONNECT              | ('P' flag)
533		* connect:remote - allows remote CONNECT             | ('Q' flag)
534		* die            - allows DIE                        | ('D' flag)
535		* dline          - allows DLINE                      |
531	–	* gline          - allows GLINE                      | ('G' flag)
536		* globops        - allows GLOBOPS                    |
537	+	* join:resv      - allows to JOIN resv {} channels
538		* kill           - allows to KILL local clients      | ('N' flag)
539		* kill:remote    - allows remote users to be /KILL'd | ('O' flag)
540		* kline          - allows KLINE                      | ('K' flag)
541		* locops         - allows LOCOPS                     |
542		* module         - allows MODULE                     |
543	+	* nick:resv      - allows to use NICK on resv {} nicks
544		* opme           - allows OPME                       |
545		* rehash         - allows oper to REHASH config      | ('H' flag)
546		* remoteban      - allows remote KLINE/UNKLINE       | ('B' flag)
547		* restart        - allows RESTART                    |
548	+	* resv           - allows RESV
549		* set            - allows SET                        |
550		* squit          - allows local SQUIT                | ('R' flag)
551		* squit:remote   - allows remote SQUIT               | ('S' flag)
552		* undline        - allows UNDLINE                    |
553		* unkline        - allows UNKLINE                    | ('U' flag)
554	+	* unresv         - allows UNRESV
555		* unxline        - allows UNXLINE                    |
556		* wallops        - allows WALLOPS                    |
557		* xline          - allows XLINE                      | ('X' flag)
#	Line 557 | Line 565 | operator {
565		*/
566		connect {
567		/* name: the name of the server. */
568	<	name = "irc.uplink.com";
568	>	name = "uplink.example.net";
569
570		/*
571		* host: the host or IP address to connect to. If a hostname is used it
572		* must match the reverse DNS of the server.
573		*/
574	<	host = "192.168.0.1";
574	>	host = "192.0.2.4";
575
576		/*
577		* vhost: the IP address to bind to when making outgoing connections to
#	Line 571 | Line 579 | connect {
579		* serverinfo::vhost and serverinfo::vhost6 will be overridden
580		* by this directive.
581		*/
582	<	vhost = "192.168.0.2";
582	>	vhost = "192.0.2.5";
583
584		/*
585		* send_password, accept_password: the passwords to send and accept.
#	Line 632 | Line 640 | connect {
640		};
641
642		connect {
643	<	name = "ipv6.some.server";
644	<	host = "3ffd:dead:beef::1";
643	>	name = "ipv6.example.net";
644	>	host = "2001:DB8::3";
645		send_password = "password";
646		accept_password = "password";
647		port = 6666;
#	Line 662 | Line 670 | cluster {
670		*       clustered lines, they need a shared {} block for *THIS*
671		*       server in order to accept them.
672		*/
673	<	name = "*.arpa";
673	>	name = "*.example.net";
674
675		/*
676		* type: list of what to share; options are as follows:
#	Line 694 | Line 702 | shared {
702		* If this is not specified, the user will be allowed to kline from all
703		* servers.
704		*/
705	<	name = "irc2.some.server";
705	>	name = "irc2.example.net";
706
707		/*
708		* user: the user@host mask that is allowed to set klines. If this is
#	Line 724 | Line 732 | shared {
732		* Oper issued klines will be added to the specified kline database
733		*/
734		kill {
735	<	user = "bad@*.hacked.edu";
735	>	user = "bad@*.example.net";
736		reason = "Obviously hacked account";
737		};
738
#	Line 734 | Line 742 | kill {
742		* Oper issued dlines will be added to the specified dline database
743		*/
744		deny {
745	<	ip = "10.0.1.0/24";
745	>	ip = "192.0.2.0/28";
746		reason = "Reconnecting vhosted bots";
747		};
748
#	Line 742 | Line 750 | deny {
750		* exempt {}:  IP addresses that are exempt from deny {} and Dlines
751		*/
752		exempt {
753	<	ip = "192.168.0.0/16";
753	>	ip = "192.0.2.240/28";
754		};
755
756		/*
#	Line 796 | Line 804 | gecos {
804		*       has the same service {} block.
805		*/
806		service {
807	<	name = "service.someserver";
808	<	name = "stats.someserver";
807	>	name = "service.example.net";
808	>	name = "stats.example.net";
809		};
810
811		/*
812		* pseudo {}: adds pseudo/custom commands also known as service aliases
813		*/
814		pseudo {
815	<	/* command: the actual command/alias */
815	>	/* command: the actual command/alias. */
816		command = "IDENTIFY";
817
818	<	/* prepend: optional text that can be prepended before the user's message */
818	>	/* prepend: optional text that can be prepended before the user's message. */
819		prepend = "IDENTIFY ";
820
821	<	/* name: the service name, used for error messages */
821	>	/* name: the service name, used for error messages. */
822		name = "NickServ";
823
824	<	/* target: the actual target where this message should be sent to */
825	<	target = "NickServ@service.someserver";
824	>	/* target: the actual target where this message should be sent to. */
825	>	target = "NickServ@service.example.net";
826		};
827
828		pseudo {
829		command = "CHANSERV";
830		name = "ChanServ";
831	<	target = "ChanServ@service.someserver";
831	>	target = "ChanServ@service.example.net";
832		};
833
834		pseudo {
835		command = "CS";
836		name = "ChanServ";
837	<	target = "ChanServ@service.someserver";
837	>	target = "ChanServ@service.example.net";
838		};
839
840		pseudo {
841		command = "NICKSERV";
842		name = "NickServ";
843	<	target = "NickServ@service.someserver";
843	>	target = "NickServ@service.example.net";
844		};
845
846		pseudo {
847		command = "NS";
848		name = "NickServ";
849	<	target = "NickServ@service.someserver";
849	>	target = "NickServ@service.example.net";
850		};
851
852		pseudo {
853		command = "MEMOSERV";
854		name = "MemoServ";
855	<	target = "MemoServ@service.someserver";
855	>	target = "MemoServ@service.example.net";
856		};
857
858		pseudo {
859		command = "MS";
860		name = "MemoServ";
861	<	target = "MemoServ@service.someserver";
861	>	target = "MemoServ@service.example.net";
862		};
863
864		pseudo {
865		command = "OPERSERV";
866		name = "OperServ";
867	<	target = "OperServ@service.someserver";
867	>	target = "OperServ@service.example.net";
868		};
869
870		pseudo {
871		command = "OS";
872		name = "OperServ";
873	<	target = "OperServ@service.someserver";
873	>	target = "OperServ@service.example.net";
874		};
875
876		pseudo {
877		command = "HOSTSERV";
878		name = "HostServ";
879	<	target = "HostServ@service.someserver";
879	>	target = "HostServ@service.example.net";
880		};
881
882		pseudo {
883		command = "HS";
884		name = "HostServ";
885	<	target = "HostServ@service.someserver";
885	>	target = "HostServ@service.example.net";
886		};
887
888		pseudo {
889		command = "BOTSERV";
890		name = "BotServ";
891	<	target = "BotServ@service.someserver";
891	>	target = "BotServ@service.example.net";
892		};
893
894		pseudo {
895		command = "BS";
896		name = "BotServ";
897	<	target = "BotServ@service.someserver";
897	>	target = "BotServ@service.example.net";
898		};
899
900		/*
#	Line 934 | Line 942 | channel {
942		*/
943		max_channels = 25;
944
945	<	/* max_bans: maximum number of +b/e/I modes in a channel */
945	>	/* max_bans: maximum number of +b/e/I modes in a channel. */
946		max_bans = 100;
947
948		/*
949	<	* how many joins in how many seconds constitute a flood. Use 0 to
950	<	* disable. +b opers will be notified (changeable via /set)
951	<	*/
952	<	join_flood_count = 16;
945	<	join_flood_time = 8 seconds;
946	<
947	<	/*
948	<	* The ircd will now check splitmode (whether a server is split from
949	<	* the network) every few seconds; this functionality is known as
950	<	* splitcode and is influenced by the options below.
951	<	*
952	<	* Either split users or split servers can activate splitmode, but
953	<	* both conditions must be met for the ircd to deactivate splitmode.
954	<	*
955	<	* You may force splitmode to be permanent by /quote set splitmode on
956	<	*/
957	<
958	<	/*
959	<	* default_split_user_count: when the usercount is lower than this level,
960	<	* consider ourselves split. This must be set for automatic splitmode.
949	>	* default_join_flood_count, default_join_flood_time:
950	>	* how many joins in how many seconds constitute a flood. Use 0 to disable.
951	>	* +b opers will be notified. These are only default values which can be
952	>	* changed via "/QUOTE SET JFLOODCOUNT" and "/QUOTE SET JFLOODTIME".
953		*/
954	<	default_split_user_count = 0;
955	<
964	<	/*
965	<	* default_split_server_count: when the servercount is lower than this,
966	<	* consider ourselves split. This must be set for automatic splitmode.
967	<	*/
968	<	default_split_server_count = 0;
969	<
970	<	/* no_create_on_split: do not allow users to create channels on split. */
971	<	no_create_on_split = yes;
972	<
973	<	/* no_join_on_split: do not allow users to join channels on a split. */
974	<	no_join_on_split = no;
954	>	default_join_flood_count = 18;
955	>	default_join_flood_time = 6 seconds;
956		};
957
958		/*
#	Line 993 | Line 974 | serverhide {
974		flatten_links = no;
975
976		/*
977	<	* links_delay: how often to update the links file when it is
977	>	* flatten_links_delay: how often to update the links file when it is
978		* flattened.
979		*/
980	<	links_delay = 5 minutes;
980	>	flatten_links_delay = 5 minutes;
981	>
982	>	/*
983	>	* flatten_links_file: path to the flatten links cache file.
984	>	*/
985	>	flatten_links_file = "var/lib/links.txt";
986
987		/*
988		* hidden: hide this server from a /links output on servers that
#	Line 1019 | Line 1005 | serverhide {
1005		/*
1006		* hidden_name: use this as the servername users see if hide_servers = yes.
1007		*/
1008	<	hidden_name = "*.hidden.com";
1008	>	hidden_name = "*.example.net";
1009
1010		/*
1011		* hide_server_ips: if this is disabled, opers will be unable to see
#	Line 1050 | Line 1036 | general {
1036		/* max_watch: maximum WATCH entries a client can have. */
1037		max_watch = 30;
1038
1039	<	/* max_accept: maximum allowed /accept's for +g usermode. */
1039	>	/* max_accept: maximum allowed /accept's for +g user mode. */
1040		max_accept = 30;
1041
1056	–	/* gline_enable: enable glines (network-wide temporary klines). */
1057	–	gline_enable = yes;
1058	–
1042		/*
1043	<	* gline_duration: the amount of time a G-line will remain on your
1044	<	* server before expiring.
1043	>	* dline_min_cidr: the minimum required length of a CIDR bitmask
1044	>	* for IPv4 based D-lines.
1045		*/
1046	<	gline_duration = 1 day;
1046	>	dline_min_cidr = 16;
1047
1048		/*
1049	<	* gline_request_duration: how long a pending G-line can be around.
1050	<	* 10 minutes should be plenty.
1049	>	* dline_min_cidr6: the minimum required length of a CIDR bitmask
1050	>	* for IPv6 based D-lines.
1051		*/
1052	<	gline_request_duration = 10 minutes;
1052	>	dline_min_cidr6 = 48;
1053
1054		/*
1055	<	* gline_min_cidr: the minimum required length of a CIDR bitmask
1056	<	* for IPv4 based G-lines.
1055	>	* kline_min_cidr: the minimum required length of a CIDR bitmask
1056	>	* for IPv4 based K-lines.
1057		*/
1058	<	gline_min_cidr = 16;
1058	>	kline_min_cidr = 16;
1059
1060		/*
1061	<	* gline_min_cidr6: the minimum required length of a CIDR bitmask
1062	<	* for IPv6 based G-lines.
1061	>	* kline_min_cidr6: the minimum required length of a CIDR bitmask
1062	>	* for IPv6 based K-lines.
1063		*/
1064	<	gline_min_cidr6 = 48;
1064	>	kline_min_cidr6 = 48;
1065
1066		/*
1067		* invisible_on_connect: whether to automatically set mode +i on
#	Line 1105 | Line 1088 | general {
1088
1089		/*
1090		* disable_auth: completely disable ident lookups; if you enable this,
1091	<	* be careful of what you set need_ident to in your auth {} blocks
1091	>	* be careful of what you set need_ident to in your auth {} blocks.
1092		*/
1093		disable_auth = no;
1094
#	Line 1118 | Line 1101 | general {
1101		/*
1102		* default_floodcount: the default value of floodcount that is configurable
1103		* via /quote set floodcount. This is the number of lines a user may send
1104	<	* to any other user/channel in one second.
1104	>	* to any other user/channel in one second. Set to 0 to disable.
1105		*/
1106		default_floodcount = 10;
1107
#	Line 1136 | Line 1119 | general {
1119
1120		/*
1121		* min_nonwildcard: the minimum number of non-wildcard characters in
1122	<	* k/d/g lines placed via the server. K-lines hand-placed are exempt from
1122	>	* k/d lines placed via the server. K-lines hand-placed are exempt from
1123		* this limit.
1124	<	* Wildcard characters: '.', ':', '*', '?', '@', '!'
1124	>	* Wildcard characters: '.', ':', '*', '?'
1125		*/
1126		min_nonwildcard = 4;
1127
#	Line 1151 | Line 1134 | general {
1134		/* anti_nick_flood: enable the nickflood control code. */
1135		anti_nick_flood = yes;
1136
1137	<	/* nick flood: the number of nick changes allowed in the specified period. */
1138	<	max_nick_time = 20 seconds;
1137	>	/*
1138	>	* max_nick_changes, max_nick_time: the number of nick changes allowed in
1139	>	* the specified period.
1140	>	*/
1141		max_nick_changes = 5;
1142	+	max_nick_time = 20 seconds;
1143
1144		/*
1145		* away_count, away_time: how many AWAY command are permitted per
#	Line 1191 | Line 1177 | general {
1177		*/
1178		stats_e_disabled = no;
1179
1180	+	/* stats_m_oper_only: make /stats m/M (messages) oper only. */
1181	+	stats_m_oper_only = yes;
1182	+
1183		/* stats_o_oper_only: make stats o (opers) oper only. */
1184		stats_o_oper_only = yes;
1185
#	Line 1210 | Line 1199 | general {
1199
1200		/*
1201		* stats_k_oper_only: make stats k/K (klines) oper only. Set to:
1202	<	*     yes    - show users no auth {} blocks, made oper only
1203	<	*     masked - show users the first matching auth {} block
1204	<	*     no     - show users all auth {} blocks
1202	>	*     yes    - show users no klines, made oper only
1203	>	*     masked - show users the first matching kline
1204	>	*     no     - show users all klines
1205		*/
1206		stats_k_oper_only = yes;
1207
#	Line 1256 | Line 1245 | general {
1245		/* no_oper_flood: increase flood limits for opers. */
1246		no_oper_flood = yes;
1247
1259	–	/* oper_pass_resv: allow opers to over-ride RESVs on nicks/channels. */
1260	–	oper_pass_resv = yes;
1261	–
1262	–	/* REMOVE ME. The following line checks that you have been reading. */
1263	–	havent_read_conf = 1;
1264	–
1248		/*
1249		* max_targets: the maximum number of targets in a single
1250		* PRIVMSG/NOTICE. Set to 999 NOT 0 for unlimited.
#	Line 1269 | Line 1252 | general {
1252		max_targets = 4;
1253
1254		/*
1255	<	* usermodes configurable: a list of usermodes for the options below
1255	>	* user modes configurable: a list of user modes for the options below
1256		*
1257		* +b - bots         - See bot and drone flooding notices
1258		* +c - cconn        - Client connection/quit notices
#	Line 1295 | Line 1278 | general {
1278		* +y - spy          - See LINKS, STATS, TRACE notices etc.
1279		*/
1280
1281	<	/* oper_only_umodes: usermodes only operators may set. */
1281	>	/* oper_only_umodes: user modes only operators may set. */
1282		oper_only_umodes = bots, cconn, debug, external, farconnect, full, hidden, locops,
1283		nchange, rej, skill, spy, unauth;
1284
1285	<	/* oper_umodes: default usermodes operators get when they /oper or /challenge. */
1285	>	/* oper_umodes: default user modes operators get when they /oper. */
1286		oper_umodes = bots, locops, servnotice, wallop;
1287
1288		/*
#	Line 1368 | Line 1351 | log {
1351		size = 50 megabytes;
1352		};
1353
1371	–	file {
1372	–	type = gline;
1373	–	name = "var/log/gline.log";
1374	–	size = 50 megabytes;
1375	–	};
1376	–
1354		file {
1355		type = xline;
1356		name = "var/log/xline.log";

Diff Legend

–	Removed lines
+	Added lines
<	Changed lines (old)
>	Changed lines (new)